View Single Post
  #4  
Old 02-20-2012, 07:23 PM
Cryogenetica Cryogenetica is offline
Member
 
Join Date: Mar 2011
Posts: 9
Default

[Please DO NOT reply to yourself, use the Edit button to edit your post]

@yogi_saw
Thanks for the suggestion, I've tried several different decompilers on the application itself which get me most if not all the source except for the main.* files which are the ones which call the sentinel dongle.

RefoxXI+, (insert Chinese characters here), (insert Russian characters here), Probably maybe 10 or so programs in total. At one point I even tried an application which injected a save state into the call *.exe to see if I could stop some kind of time based thing.

I attempted CAB extraction, monitors on installshield and associated *ins files to see if I could find something I could alter with no luck.

I had the same issue with the fox version as well. This is why when I went about using the multikey emulation to simulate the key as opposed to manipulate the call code and have to recompile.

Considering the SP32W thing we were using before was a lesser version of the solution we have currently for the fox it was really just looking for a way to enhance that.

@gnerogeem
Thank you for making a valuable contribution to this thread.

This is not simply a request for crack... I have cracks for both of my software I am looking to enhance my SQL version crack to match my Fox Crack so I can upgrade my software.

I have no quams at all in putting in the effort to provide information, on both the software and what I have done and would also like to make it very clear i'm not just putting this up here and forgetting about it, I am still actively working to solve it myself.

Just sort of give you guys some what of an indication of what I have at the moment.

I have used Sentinel Dumper from software-key.org to create the 3832.bin file which I have attached here.

http://edoc.com/vtds4p2mutu4

I have also tried using PVA3.3 without any success.

it gives me the following message with and without Brute WP on

Local scanning...
Server: LOCAL (Version: 6.3.1)
Key found: 3832 - Hard Limit: 1 (In use: 0)
Subnet scanning...
Check TCP servers...
Check IPX servers...
No server responded to the client broadcast. There is no server running
Completed

Using "Toro Hasp Logger V4.0 public" I managed to catch the traffic from connect to port and opening app. The only thing is when I opened the app the Toro Logger crashed every time and 9 times out of 10 (I actually did this 10 times) it failed to collect any data because it crashed.

However on my 10th attempt I managed to get the following data from it.

Code:
ControlTransfer , IN
SetupPacket:
80 06 00 02 00 00 09 00 
	Data:
	09 02 C1 00 03 01 00 E0 
	00 
ControlTransfer , IN
SetupPacket:
80 06 00 02 00 00 C1 00 
	Data:
	09 02 C1 00 03 01 00 E0 
	00 09 04 00 00 03 E0 01 
	01 00 07 05 81 03 10 00 
	01 07 05 02 02 40 00 01 
	07 05 82 02 40 00 01 09 
	04 01 00 02 E0 01 01 00 
	07 05 03 01 00 00 01 07 
	05 83 01 00 00 01 09 04 
	01 01 02 E0 01 01 00 07 
	05 03 01 09 00 01 07 05 
	83 01 09 00 01 09 04 01 
	02 02 E0 01 01 00 07 05 
	03 01 11 00 01 07 05 83 
	01 11 00 01 09 04 01 03 
	02 E0 01 01 00 07 05 03 
	01 19 00 01 07 05 83 01 
	19 00 01 09 04 01 04 02 
	E0 01 01 00 07 05 03 01 
	21 00 01 07 05 83 01 21 
	00 01 09 04 01 05 02 E0 
	01 01 00 07 05 03 01 31 
	00 01 07 05 83 01 31 00 
	01 09 04 02 00 00 FE 01 
	00 00 07 21 07 88 13 FF 
	03 
ControlTransfer , IN
SetupPacket:
80 00 00 00 00 00 02 00 
	Data:
	01 00 
ControlTransfer , IN
SetupPacket:
20 00 00 00 00 00 03 00 
	Data:
	00 00 00 
ControlTransfer , IN
SetupPacket:
20 00 00 00 00 00 03 00 
	Data:
	23 41 E7 
ControlTransfer , IN
SetupPacket:
20 00 00 00 00 00 03 00 
	Data:
	7F A2 E9 
ControlTransfer , IN
SetupPacket:
20 00 00 00 00 00 03 00 
	Data:
	7F A2 E9 
ControlTransfer , IN
SetupPacket:
20 00 00 00 00 00 03 00 
	Data:
	7F A2 E9 
ControlTransfer , IN
SetupPacket:
20 00 00 00 00 00 03 00 
	Data:
	DB 03 EC 
ControlTransfer , IN
SetupPacket:
20 00 00 00 00 00 04 00 
	Data:
	DB 03 EC 35 
ControlTransfer , IN
SetupPacket:
20 00 00 00 00 00 03 00 
	Data:
	00 00 00 
ControlTransfer , IN
SetupPacket:
20 00 00 00 00 00 04 00 
	Data:
	07 78 EF 36 
ControlTransfer , IN
SetupPacket:
20 00 00 00 00 00 04 00 
	Data:
	07 78 EF 36 
ControlTransfer , IN
SetupPacket:
20 00 00 00 00 00 0B 00 
	Data:
	07 78 EF 36 21 F0 CC 01 
	77 00 00 
ControlTransfer , IN
SetupPacket:
20 00 00 00 00 00 03 00 
	Data:
	63 D9 F1 
ControlTransfer , IN
SetupPacket:
20 00 00 00 00 00 05 00 
	Data:
	63 D9 F1 36 21 
ControlTransfer , IN
SetupPacket:
20 00 00 00 00 00 07 00 
	Data:
	63 D9 F1 36 21 F0 CC 
ControlTransfer , IN
SetupPacket:
20 00 00 00 00 00 04 00 
	Data:
	63 D9 F1 36 
ControlTransfer , IN
SetupPacket:
20 00 00 00 00 00 07 00 
	Data:
	BF 3A F4 36 21 F0 CC 
ControlTransfer , IN
SetupPacket:
20 00 00 00 00 00 04 00 
	Data:
	BF 3A F4 36 
ControlTransfer , IN
SetupPacket:
20 00 00 00 00 00 04 00 
	Data:
	BF 3A F4 36 
ControlTransfer , IN
SetupPacket:
20 00 00 00 00 00 06 00 
	Data:
	BF 3A F4 36 21 F0 
ControlTransfer , IN
SetupPacket:
20 00 00 00 00 00 F4 00 
	Data:
	1B 9C F6 36 21 F0 CC 01 
	7E 00 00 00 00 00 00 00 
	1B 9C F6 36 21 F0 CC 01 
	68 00 00 00 00 00 00 00 
	01 00 00 00 50 00 1A 00 
	00 00 00 00 68 FC 58 84 
	22 00 00 00 9C FC 58 84 
	00 00 00 00 0A 00 00 00 
	7D A0 2B 84 00 00 00 00 
	00 00 00 00 FF FF FF FF 
	0D F0 AD DE FF 00 00 00 
	00 00 00 00 00 00 00 00 
	00 00 00 00 00 00 00 00 
	10 C5 7B 84 00 00 00 00 
	00 00 F4 00 33 0C 07 FC 
	0F FF FF FF FF FF 77 FD 
	F8 36 21 F0 CC 01 72 00 
	00 00 00 00 00 00 1B 9C 
	F6 36 21 F0 CC 01 69 00 
	00 00 00 00 00 00 00 00 
	00 00 48 00 09 00 00 00 
	00 00 68 FC 58 84 22 00 
	00 00 04 38 D9 83 03 00 
	00 00 06 00 00 00 38 BD 
	3B 84 08 6F 21 84 00 00 
	00 00 FF FF FF FF 0D F0 
	AD DE 00 00 00 00 00 00 
	00 00 00 00 00 00 00 00 
	00 00 00 00 00 00 00 00 
	00 00 0E 04 01 33 0C 00 
	77 FD F8 36 
ControlTransfer , IN
SetupPacket:
20 00 00 00 00 00 0A 00 
	Data:
	77 FD F8 36 21 F0 CC 01 
	6F 01 
ControlTransfer , IN
SetupPacket:
20 00 00 00 00 00 FB 00 
	Data:
	77 FD F8 36 21 F0 CC 01 
	78 00 00 00 00 00 00 00 
	77 FD F8 36 21 F0 CC 01 
	70 00 00 00 00 00 00 00 
	01 00 00 00 50 00 1A 00 
	00 00 00 00 68 FC 58 84 
	22 00 00 00 9C FC 58 84 
	00 00 00 00 04 00 00 00 
	7D A0 2B 84 00 00 00 00 
	00 00 00 00 FF FF FF FF 
	0D F0 AD DE FF 00 00 00 
	00 00 00 00 00 00 00 00 
	00 00 00 00 00 00 00 00 
	10 C5 7B 84 00 00 00 00 
	00 00 FB 00 1A 0C 01 02 
	77 FD F8 36 21 F0 CC 01 
	72 00 00 00 00 00 00 00 
	77 FD F8 36 21 F0 CC 01 
	71 00 00 00 00 00 00 00 
	00 00 00 00 48 00 09 00 
	00 00 00 00 68 FC 58 84 
	22 00 00 00 04 38 D9 83 
	03 00 00 00 06 00 00 00 
	C8 B3 10 84 F8 60 97 84 
	00 00 00 00 FF FF FF FF 
	0D F0 AD DE 00 00 00 00 
	00 00 00 00 00 00 00 00 
	00 00 00 00 00 00 00 00 
	00 00 00 00 0E 04 01 1A 
	0C 00 77 FD F8 36 21 F0 
	CC 01 6C 00 00 00 00 00 
	00 00 77 
ControlTransfer , IN
SetupPacket:
20 00 00 00 00 00 04 00 
	Data:
	D3 5E FB 36 
ControlTransfer , IN
SetupPacket:
20 00 00 00 00 00 F4 00 
	Data:
	D3 5E FB 36 21 F0 CC 01 
	7A 00 00 00 00 00 00 00 
	D3 5E FB 36 21 F0 CC 01 
	78 00 00 00 00 00 00 00 
	01 00 00 00 50 00 1A 00 
	00 00 00 00 68 FC 58 84 
	22 00 00 00 9C FC 58 84 
	00 00 00 00 06 00 00 00 
	7D C4 19 84 00 00 00 00 
	00 00 00 00 FF FF FF FF 
	0D F0 AD DE FF 00 00 00 
	00 00 00 00 00 00 00 00 
	00 00 00 00 00 00 00 00 
	10 C5 7B 84 00 00 00 00 
	00 00 F4 00 24 0C 03 04 
	01 02 2F C0 FD 36 21 F0 
	CC 01 72 00 00 00 00 00 
	00 00 D3 5E FB 36 21 F0 
	CC 01 79 00 00 00 00 00 
	00 00 00 00 00 00 48 00 
	09 00 00 00 00 00 68 FC 
	58 84 22 00 00 00 04 38 
	D9 83 03 00 00 00 06 00 
	00 00 A0 A8 13 84 08 3B 
	2D 84 00 00 00 00 FF FF 
	FF FF 0D F0 AD DE 00 00 
	00 00 00 00 00 00 00 00 
	00 00 00 00 00 00 00 00 
	00 00 00 00 00 00 0E 04 
	01 24 0C 00 2F C0 FD 36 
	21 F0 CC 01 
ControlTransfer , IN
SetupPacket:
20 00 00 00 00 00 06 00 
	Data:
	2F C0 FD 36 21 F0 
ControlTransfer , IN
SetupPacket:
20 00 00 00 00 00 F4 00 
	Data:
	00 00 00 00 00 00 00 00 
	00 00 00 00 00 00 00 00 
	00 00 00 00 00 00 00 00 
	00 00 00 00 00 00 00 00 
	00 00 00 00 00 00 00 00 
	00 00 00 00 00 00 00 00 
	00 00 00 00 00 00 00 00 
	00 00 00 00 00 00 00 00 
	00 00 00 00 00 00 00 00 
	00 00 00 00 00 00 00 00 
	00 00 00 00 00 00 00 00 
	00 00 00 00 00 00 00 00 
	00 00 00 00 00 00 00 00 
	00 00 00 00 00 00 00 00 
	00 00 00 00 00 00 00 00 
	00 00 00 00 00 00 00 00 
	00 00 00 00 00 00 00 00 
	00 00 00 00 00 00 00 00 
	00 00 00 00 00 00 00 00 
	00 00 00 00 00 00 00 00 
	00 00 00 00 00 00 00 00 
	00 00 00 00 00 00 00 00 
	00 00 00 00 00 00 00 00 
	00 00 00 00 00 00 00 00 
	00 00 00 00 00 00 00 00 
	00 00 00 00 00 00 00 00 
	00 00 00 00 00 00 00 00 
	00 00 00 00 00 00 00 00 
	00 00 00 00 00 00 00 00 
	00 00 00 00 00 00 00 00 
	00 00 00 00
That being said, I don't know if this information is complete and given the fact that it never produced the *.bin file prefixed with
"TORO_HASP_LOG_"

I have noticed that other users have been using PVA to solve the bin to dmp but as yet still searching through posts on here and though out the WWW to find what I can.

As always, constructive input / suggestions are welcome

Last edited by Git : 02-20-2012 at 10:04 PM.
Reply With Quote